$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer File: 1add3b23-5fb0-4412-be17-98450d352516.cer (raw, json) Hash identifier: HzLEPBiqT7QZpHPgtL4BhDfDcxVIqrWxvt0V6IA31Sg= Subject key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584E332CE4AF67CD13BF794B34C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 17 Jun 2026 08:45:11 +0000 Certificate not after: Tue 19 Sep 2028 08:45:11 +0000 Subordinate resources: AS: 11100 AS: 17054 AS: 53976 IP: 64.72.128.0/19 IP: 64.255.240.0/20 IP: 66.11.0.0/19 IP: 66.159.64.0/19 IP: 66.181.64.0/19 IP: 66.230.64.0/20 IP: 69.7.96.0/20 IP: 206.41.192.0/19 IP: 206.183.0.0/19 IP: 206.210.64.0/19 IP: 206.223.22.0/24 IP: 207.54.128.0/18 IP: 207.114.0.0/17 IP: 208.40.128.0 -- 208.40.207.255 IP: 208.40.224.0/19 IP: 209.114.128.0/18 IP: 209.143.64.0/18 IP: 209.166.128.0/18 IP: 209.190.128.0/18 IP: 209.221.0.0/19 IP: 216.37.0.0/18 IP: 216.82.64.0/18 IP: 216.130.0.0/19 IP: 216.151.64.0/18 IP: 216.183.160.0/19 IP: 216.230.96.0/19 IP: 216.239.240.0/20 IP: 2607:f4d0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:33:2c:e4:af:67:cd:13:bf:79:4b:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jun 17 08:45:11 2026 GMT Not After : Sep 19 08:45:11 2028 GMT Subject: CN=1add3b23-5fb0-4412-be17-98450d352516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:55:68:79:ae:4c:81:3e:5d:53:3f:ea:1d:2b: 2a:d0:4f:a3:06:e3:f1:b9:fe:ee:c7:6a:bd:f4:f1: c5:35:3f:c6:bf:c8:63:7d:45:12:fe:11:0b:8b:f3: ae:e0:bb:e4:9c:9f:d6:e8:92:e2:68:e9:6a:30:62: d2:21:6b:d5:23:58:58:91:61:8f:79:17:d9:66:f7: e7:8a:dc:5c:c2:5d:a9:85:98:6d:cb:4f:f0:2f:8c: a0:4b:bd:94:f5:0c:34:72:0f:90:57:66:41:37:62: 21:2d:3b:a0:30:30:3f:9a:ee:77:2a:e5:22:ea:ff: 09:5d:ec:12:e5:58:41:5b:3b:4e:1b:5f:c9:51:65: a9:65:7d:0f:0d:a2:88:3e:19:ef:6d:b1:64:cb:84: 02:b5:1b:32:97:38:47:63:e4:86:18:79:c6:14:90: b7:a8:c1:b9:59:c9:37:7c:b4:39:4d:29:8f:8f:f9: 69:ab:2d:b4:4a:63:38:36:97:4f:b7:96:26:36:46: 84:55:d4:4b:9a:16:b3:df:d3:94:72:6a:bd:ca:52: 74:88:fe:e7:5d:d0:09:17:5f:fd:61:3c:18:58:41: 57:63:38:a3:fd:6d:47:a4:23:b9:65:2a:53:ab:43: 99:48:97:27:b7:6b:24:27:27:a8:4b:e7:51:c6:94: 62:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 64.72.128.0/19 64.255.240.0/20 66.11.0.0/19 66.159.64.0/19 66.181.64.0/19 66.230.64.0/20 69.7.96.0/20 206.41.192.0/19 206.183.0.0/19 206.210.64.0/19 206.223.22.0/24 207.54.128.0/18 207.114.0.0/17 208.40.128.0-208.40.207.255 208.40.224.0/19 209.114.128.0/18 209.143.64.0/18 209.166.128.0/18 209.190.128.0/18 209.221.0.0/19 216.37.0.0/18 216.82.64.0/18 216.130.0.0/19 216.151.64.0/18 216.183.160.0/19 216.230.96.0/19 216.239.240.0/20 IPv6: 2607:f4d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11100 17054 53976 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:3a:e2:be:03:30:44:cf:f5:41:54:86:18:a0:55:60:bf:af: 41:e1:af:73:6e:f3:21:04:30:f5:75:b5:3c:b7:5d:cd:21:bf: b4:76:75:36:53:ed:ce:90:52:49:cf:3c:bb:30:cb:d8:d2:14: 67:1e:63:e5:48:8c:a1:04:89:4c:2b:24:d9:1d:4b:19:70:4f: cb:13:9c:7a:12:c4:37:d8:90:37:6d:ff:f3:0a:12:3a:5c:32: 40:c4:3f:08:8a:3d:cd:98:1b:20:a0:94:2a:a9:7d:e2:13:7c: b2:41:90:c2:16:a4:8c:7d:7d:7a:86:4d:df:8c:9d:28:f5:5e: 3f:81:1e:28:3e:1b:04:ca:68:b3:d5:ee:24:72:a2:02:03:2c: 14:9a:5b:fe:b0:d6:b7:6b:3d:a3:2b:33:7c:e3:f5:62:e7:c0: e3:68:b9:1e:b1:f1:50:65:ce:5d:f3:a6:1f:1f:24:40:eb:6f: a5:9a:ad:63:fd:1a:0a:e3:bc:1d:0b:69:05:eb:61:35:4f:65: 98:b1:44:bf:00:57:16:32:13:a9:f1:fb:1d:74:7c:fd:bc:0a: 73:3a:92:61:e9:9e:46:46:3e:d8:cd:47:f2:03:31:91:ed:c6: 35:19:1b:21:50:ae:bd:3e:a3:25:35:05:6f:fe:40:e9:36:23: fe:04:23:0f -----BEGIN CERTIFICATE----- MIIHyTCCBrGgAwIBAgIUAQ0Mn0MoWE4zLOSvZ80Tv3lLNMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDYxNzA4NDUxMVoXDTI4MDkxOTA4NDUxMVowLzEtMCsGA1UEAxMk MWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUyNTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1Voea5MgT5dUz/qHSsq0E+jBuPxuf7ux2q9 9PHFNT/Gv8hjfUUS/hELi/Ou4LvknJ/W6JLiaOlqMGLSIWvVI1hYkWGPeRfZZvfn itxcwl2phZhty0/wL4ygS72U9Qw0cg+QV2ZBN2IhLTugMDA/mu53KuUi6v8JXewS 5VhBWztOG1/JUWWpZX0PDaKIPhnvbbFky4QCtRsylzhHY+SGGHnGFJC3qMG5Wck3 fLQ5TSmPj/lpqy20SmM4NpdPt5YmNkaEVdRLmhaz39OUcmq9ylJ0iP7nXdAJF1/9 YTwYWEFXYzij/W1HpCO5ZSpTq0OZSJcnt2skJyeoS+dRxpRicQIDAQABo4IE2zCC BNcwHQYDVR0OBBYEFN/WqzUIxGejaY5LXeqHeMB6HY4mMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8x YWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzFhZGQzYjIzLTVmYjAtNDQxMi1i ZTE3LTk4NDUwZDM1MjUxNi8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQz NTI1MTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwgdYGCCsGAQUF BwEHAQH/BIHGMIHDMIGxBAIAATCBqgMEBUBIgAMEBED/8AMEBUILAAMEBUKfQAME BUK1QAMEBELmQAMEBEUHYAMEBc4pwAMEBc63AAMEBc7SQAMEAM7fFgMEBs82gAME B89yADAMAwQH0CiAAwQE0CjAAwQF0CjgAwQG0XKAAwQG0Y9AAwQG0aaAAwQG0b6A AwQF0d0AAwQG2CUAAwQG2FJAAwQF2IIAAwQG2JdAAwQF2LegAwQF2OZgAwQE2O/w MA0EAgACMAcDBQAmB/TQMCIGCCsGAQUFBwEIAQH/BBMwEaAPMA0CAitcAgJCngID ANLYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAC464r4DMETP9UFUhhigVWC/r0Hhr3Nu8yEEMPV1tTy3Xc0h v7R2dTZT7c6QUknPPLswy9jSFGceY+VIjKEEiUwrJNkdSxlwT8sTnHoSxDfYkDdt //MKEjpcMkDEPwiKPc2YGyCglCqpfeITfLJBkMIWpIx9fXqGTd+MnSj1Xj+BHig+ GwTKaLPV7iRyogIDLBSaW/6w1rdrPaMrM3zj9WLnwONouR6x8VBlzl3zph8fJEDr b6WarWP9GgrjvB0LaQXrYTVPZZixRL8AVxYyE6nx+x10fP28CnM6kmHpnkZGPtjN R/IDMZHtxjUZGyFQrr0+oyU1BW/+QOk2I/4EIw8= -----END CERTIFICATE-----Generated at Thu Jul 23 20:21:04 2026 by rpki-client